https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:06:00.645681+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-00053 bdu:2015-00053 2026-10-02T15:06:00.763804+00:00 bdu:2015-00053 https://cve.radiocsirt.org/vuln/certfr-2014-avi-209 certfr-2014-avi-209 — De multiples vulnérabilités ont été corrigées dans les produits <span class="textit">Mozilla</span>. Certaines d'entre… 2026-10-02T15:06:00.763852+00:00 certfr-2014-avi-209 https://cve.radiocsirt.org/vuln/euvd-2026-97689 EUVD-2026-97689 2026-10-02T15:06:00.763872+00:00 EUVD-2026-97689 https://cve.radiocsirt.org/vuln/fkie_cve-2014-1524 fkie_cve-2014-1524 2026-10-02T15:06:00.763885+00:00

The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted JavaScript code that accesses a non-XBL object as if it were an XBL object.

 https://cve.radiocsirt.org/vuln/ghsa-c496-q9f8-gv47 GHSA-c496-q9f8-gv47 2026-10-02T15:06:00.763915+00:00

The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted JavaScript code that accesses a non-XBL object as if it were an XBL object.

 https://cve.radiocsirt.org/vuln/gsd-2014-1524 gsd-2014-1524 2026-10-02T15:06:00.763932+00:00 gsd-2014-1524 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10071-1 openSUSE-SU-2024:10071-1 — MozillaFirefox-50.1.0-1.1 on GA media 2026-10-02T15:06:00.763942+00:00

MozillaFirefox-50.1.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2014:0448 RHSA-2014:0448 — Red Hat Security Advisory: firefox security update 2026-10-02T15:06:00.764427+00:00

Mozilla: Miscellaneous memory safety hazards (rv:24.5) (MFSA 2014-34) Mozilla: Out of bounds read while decoding JPG images (MFSA-2014-37) Mozilla: Buffer overflow when using non-XBL object as XBL (MFSA 2014-38) Mozilla: Privilege escalation through Web Notification API (MFSA 2014-42) Mozilla: Cross-site scripting (XSS) using history navigations (MFSA 2014-43) Mozilla: Use-after-free in imgLoader while resizing images (MFSA 2014-44) Mozilla: Use-after-free in nsHostResolver (MFSA 2014-46)

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-1524 UBUNTU-CVE-2014-1524 2026-10-02T15:06:00.764452+00:00

Affected: Ubuntu:14.04:LTS: firefox, Ubuntu:14.04:LTS: thunderbird

The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox before 29.0, Firefox ESR 24.x before 24.5, Thunderbird before 24.5, and SeaMonkey before 2.26 does not properly check whether objects are XBL objects, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted JavaScript code that accesses a non-XBL object as if it were an XBL object.